docs(torghut): refresh quant verify release gate

[gregkonush]

Summary

• Refreshes the Torghut quant release handoff with the current feat(torghut): add renewal bond profit escrow #5412 merge gate and no-go decision.
• Records GitOps evidence for the already-merged Torghut promotion, including Argo sync, workload readiness, hook
  completion, endpoint checks, and live runtime gate state.
• Documents residual risk, RBAC limits for direct Argo Application reads, and the rollback path for the promoted image.

Related Issues

None.

Testing

• bunx oxfmt --check docs/agents/release-handoffs/torghut-quant-verify-2026-05-05.md
• git diff --check
• Manual GitOps verification from Argo application-controller logs for torghut and torghut-options.
• Manual Kubernetes verification for Torghut pods, hook jobs, Flink REST overviews, and health/readiness endpoints in
  namespace torghut.

Breaking Changes

None.

Checklist

• Testing section documents the exact validation performed (or N/A with justification).
• Screenshots and Breaking Changes sections are handled appropriately (removed or filled in).
• Documentation, release notes, and follow-ups are updated or tracked.

[gregkonush]

Current gate: audit PR is open and waiting on required checks.

Evidence:

• feat(torghut): add renewal bond profit escrow #5412 remains blocked by the mandatory large-diff Codex review gate. The PR is clean and checks are green, but it
  changes 3,165 lines and no Codex review has posted.
• The merged Torghut promotion synced through Argo to 7e2fb9ce; runtime pods are ready on digest f183391e.
• Options catalog/enricher and sim endpoints are HTTP 200. Live trading remains no-go because
  simple_submit_disabled intentionally keeps submission closed.

Next checkpoint: wait for #5533 checks, fix failures if any, then squash-merge the audit PR if the gate is green.